x86: PV guest may crash Xen with XPTI

ISSUE DESCRIPTION The workaround for the Meltdown vulnerability XSA-254 failed to deal with an error code path connecting the INT 80 handling with general exception handling. This results in an unconditional write attempt of the value zero to an address near 2^64, in cases where a PV guest has no...

Fedora 26 : xen (2018-0746dac335)

update Xen page-table isolation XPTI mitigation and add Branch Target Injection BTI mitigation for XSA-254 DoS via non-preemptable L3/L4 pagetable freeing XSA-252 1549568 grant table v2 - v1 transition may crash Xen XSA-255 1549570 x86 PVH guest without LAPIC may DoS the host XSA-256 1549572 Note...

SUSE SLES11 Security Update : xen (SUSE-SU-2018:0678-1) (Meltdown) (Spectre)

This update for xen fixes several issues. These security issues were fixed : - CVE-2017-5753, CVE-2017-5715, CVE-2017-5754: Prevent information leaks via side effects of speculative execution, aka 'Spectre' and 'Meltdown' attacks bsc1074562, bsc1068032 - CVE-2018-5683: The vgadrawtext function...

Fedora 27 : xen (2018-c553a586c8)

add Xen page-table isolation XPTI mitigation and Branch Target Injection BTI mitigation for XSA-254 DoS via non-preemptable L3/L4 pagetable freeing XSA-252 1549568 grant table v2 - v1 transition may crash Xen XSA-255 1549570 x86 PVH guest without LAPIC may DoS the host XSA-256 1549572 Note that...

Xen Multiple Vulnerabilities (Spectre) (Meltdown) (XSA-254)

According to its self-reported version number, the Xen hypervisor installed on the remote host is affected by multiple vulnerabilities. Note that Nessus has checked the changeset versions based on the xen.git change log. Nessus did not check guest hardware configurations or if patches were applie...

CVE-2018-2379

CVE-2018-2379 affects SAP HANA Extended Application Services (EAS) 1.0. An unauthenticated user can determine if a given username is valid by inspecting error messages returned from a specific endpoint, enabling user-rename/account enumeration. The issue is limited to EAS 1.0 as described; no bro...

Debian DLA-1270-1 : xen security update

Multiple vulnerabilities have been discovered in the Xen hypervisor, which could result in privilege escalation. For Debian 7 'Wheezy', these problems have been fixed in version 4.1.6.lts1-12. We recommend that you upgrade your xen packages. Please note that CVE-2017-15590 XSA-237 will not be fix...

[SECURITY] [DLA 1270-1] xen security update

Package : xen Version : 4.1.6.lts1-12 CVE ID : CVE-2016-9603 CVE-2016-9637 CVE-2017-2620 Multiple vulnerabilities have been discovered in the Xen hypervisor, which could result in privilege escalation. For Debian 7 "Wheezy", these problems have been fixed in version 4.1.6.lts1-12. We recommend th...

Debian: Security Advisory (DLA-907-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 27 : xen (2017-5945560816)

another patch related to the XSA-240, CVE-2017-15595 issue x86 PV guests may gain access to internally used page XSA-248 broken x86 shadow mode refcount overflow check XSA-249 improper x86 shadow mode refcount error handling XSA-250 improper bug check in x86 log-dirty handling XSA-251 Note that...

Xen vcpu Destruction Handling Memory Exhaustion Guest-to-Host DoS (XSA-253)

According to its self-reported version number, the Xen hypervisor installed on the remote host is affected by a guest-to-host denial of service vulnerability. Note that Nessus has checked the changeset versions based on the xen.git change log. Nessus did not check guest hardware configurations or...

Fedora 26 : xen (2017-16a414b3c5)

another patch related to the XSA-240, CVE-2017-15595 issue xen: various flaws 1525018 x86 PV guests may gain access to internally used page XSA-248 broken x86 shadow mode refcount overflow check XSA-249 improper x86 shadow mode refcount error handling XSA-250 improper bug check in x86 log-dirty...

Xen Function Page Use Shadow Mode Reference Counting Improper Overflow Check Guest-to-Host DoS (XSA-249)

According to its self-reported version number, the Xen hypervisor installed on the remote host is affected by a guest-to-host denial of service vulnerability. Note that x86 systems are vulnerable. ARM systems are not vulnerable. Note that Nessus has checked the changeset versions based on the...

Xen Function M2P Entry Access Handling Guest-to-Host DoS (XSA-251)

According to its self-reported version number, the Xen hypervisor installed on the remote host is affected by a guest-to-host denial of service vulnerability. Note that x86 systems are vulnerable. ARM systems are not vulnerable. Note that Nessus has checked the changeset versions based on the...

OracleVM 3.3 : xen (OVMSA-2017-0177)

The remote OracleVM system is missing necessary patches to address critical security updates : - Due to the history performance reason, we decide to disable PoD feature in old OVM product.XSA-246,XSA-247 bug 27121016 CVE-2017-17044, CVE-2017-17045 - From 2a99aa99fc84a45f505f84802af56b006d14c52e M...

OracleVM 3.2 : xen (OVMSA-2017-0178)

The remote OracleVM system is missing necessary patches to address critical security updates : - From 2a99aa99fc84a45f505f84802af56b006d14c52e Mon Sep 17 00:00:00 2001 From: Andrew Cooper Date: Fri, 19 Aug 2016 15:08:10 +0100 Subject: PATCH xen/physmap: Do not permit a guest to populate PoD pages...

SUSE SLES12 Security Update : xen (SUSE-SU-2017:3236-1)

This update for xen fixes several issues. These security issues were fixed : - bsc1068187: Failure to recognize errors in the Populate on Demand PoD code allowed for DoS XSA-246 - bsc1068191: Missing p2m error checking in PoD code allowed unprivileged guests to retain a writable mapping of freed...

openSUSE: Security Advisory for xen (openSUSE-SU-2017:3193-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED12 / SLES12 Security Update : xen (SUSE-SU-2017:3178-1)

This update for xen to version 4.7.4 bsc1027519 fixes several issues. This new feature was added : - Support migration of HVM domains larger than 1 TB These security issues were fixed : - bsc1068187: Failure to recognize errors in the Populate on Demand PoD code allowed for DoS XSA-246 -...

Xen Hypervisor Guest-to-Host Privilege Escalation (XSA-247)

According to its self-reported version number, the Xen hypervisor installed on the remote host is affected by a guest-to-host privilege escalation vulnerability. This issue only affects HVM guests. Note that Nessus has checked the changeset versions based on the xen.git change log. Nessus did not...